[summary of the invention]
First technical matters that the present invention will solve is to provide a kind ofly obtains to the user method that file manages, and it is convenient to the file that user management is obtained.
Second technical matters that the present invention will solve is to provide a kind ofly obtains to the user system that file manages, and it is convenient to the file that user management is obtained.
Above-mentioned first technical matters is achieved through the following technical solutions:
A kind of the user is obtained the method that file manages, it is characterized in that, comprising:
The behavior that step 1, monitoring controlled plant obtain file;
Step 2, the file that obtained in monitoring is analyzed, obtained fileinfo, described analysis comprises attribute scanning, and described attribute scanning comprises the filename that obtains file;
Step 3, described fileinfo is shown on an administration interface.
Further scheme is, the described attribute scanning in step 2 also comprise obtain file type, file size, deposit the path, one or more in four of acquisition times, described acquisition time is creation-time or the modification time of file.
Further scheme is that the described analysis in step 2 also comprises:
The file that has obtained described in monitoring is carried out the file behavioural analysis;
Or/and, the file that has obtained described in monitoring is carried out safety analysis;
Or/and, the obtain manner of the file that has obtained described in determining to monitor.
On the basis of above each scheme, further scheme is that step 3 specifically comprises: fileinfo that will the file that all have obtained in monitoring is sorted out by the default criterion of sorting out take file as unit; Corresponding to each classification, provide in administration interface and sort out one to one tab, select any one to sort out tab, show corresponding to the fileinfo in the classification of selecteed classification tab in administration interface.
Further scheme is, described default classification criterion for by file type, by the obtain manner of file, a kind of by depositing in the path of file.
Further scheme is that step 3 specifically also comprises: provide one to obtain recently tab at described administration interface, select to obtain recently tab, show the fileinfo of the file that obtains recently in administration interface; File in some scopes of arranging in the certain hour scope that the described file that obtains is recently divided by acquisition time for all have obtained in monitoring file or by acquisition time.
Above-mentioned second technical matters is achieved through the following technical solutions:
A kind of the user is obtained the system that file manages, it is characterized in that, comprising:
Supervising device is used for the behavior that the monitoring controlled plant obtains file;
Analytical equipment is used for the file that monitoring has been obtained is analyzed, and obtains fileinfo, and described analysis comprises attribute scanning, and described attribute scanning comprises the filename that obtains file;
Display device is used for fileinfo is shown on an administration interface.
Further scheme is, the described attribute scanning in described analytical equipment also comprise obtain file size, deposit the path, one or more in three of creation-times.
Further scheme is that the described analysis in described analytical equipment also comprises:
The file that has obtained described in monitoring is carried out the file behavioural analysis;
Or/and, the file that has obtained described in monitoring is carried out safety analysis;
Or/and, the obtain manner of the file that has obtained described in determining to monitor.
On the basis of above each scheme, further scheme is, described display device, specifically comprise for will be in monitoring the fileinfo of all files that obtained sort out by the default criterion of sorting out take file as unit; Corresponding to each classification, provide in administration interface and sort out one to one tab, select any one to sort out tab, show corresponding to the fileinfo in the classification of selecteed classification tab in administration interface.Require emphasis a bit at this, the default particular content of sorting out criterion is not the main points of this programme, default (for example sort out setting that criterion can carry out unlimited amount according to the technology that those skilled in the art grasp, default classification criterion is the size according to file, and the level of the size of file can infinitely be divided, as seen, the default criterion of sorting out can have unlimited many), therefore, do not specialize the default criterion of sorting out in this programme, not talkative this programme is described unclear.
Further scheme is, described default classification criterion for by file type, by the obtain manner of file, a kind of by depositing in the path of file.
Further scheme is, described display device specifically also comprises for providing one to obtain recently tab at described administration interface, selects to obtain recently tab, shows the fileinfo of the file that obtains recently in administration interface; File in some scopes of arranging in the certain hour scope that the described file that obtains is recently divided by acquisition time for all have obtained in monitoring file or by acquisition time.
The behavior that the present invention obtains file by the monitoring controlled plant, then will comprise to the file that has obtained the filename that the analysis of obtaining filename obtains, and show on administration interface, be convenient to the user and understand quickly the file that gets comprehensively, thereby be convenient to the user management file.For the ease of the file that user overall understanding has been obtained, the present invention also carries out many-sided analysis to the file that has obtained, and comprises file size, deposits the path, creation-time, security, file behavioral trait.Understand the file that has obtained for the ease of the user, the present invention sorts out take file fileinfo on administration interface as the unit, and shows with the pattern of tab, realizes that small interface shows the purpose of many information.In addition, the present invention also carries out showing with the pattern of tab for the fileinfo of the file that obtains recently, is convenient to the file that the user understands nearest behavior and obtains recently.
[embodiment]
As shown in Figure 1, this embodiment provides a kind ofly obtains to the user method that file manages, and comprising:
The behavior that step 1, monitoring controlled plant obtain file; For example, the monitoring controlled plant obtains file by download tool (software program) or data-interface (hardware interface);
Step 2, the file that obtained in monitoring is analyzed, obtained fileinfo, described analysis comprises attribute scanning, and described attribute scanning comprises the filename that obtains file;
Step 3, described fileinfo is shown on an administration interface.
For more convenient user use and information more comprehensively, the design people has done following improvement to said method:
The scanning of attribute in above-mentioned steps 2 also comprise obtain file type, file size, deposit the path, one or more in four of acquisition times, described acquisition time is creation-time or the modification time of file.
Described analysis in above-mentioned steps 2 also comprises:
The file that has obtained described in monitoring is carried out the file behavioural analysis;
The file that has obtained described in monitoring is carried out safety analysis;
The obtain manner of the file that has obtained described in determining to monitor.
Obtain manner can be the data-interface of download tool (for example, immediate communication tool) or controlled plant
Therefore, can recognize following fileinfo by administration interface: the file that has been obtained and title thereof, size, deposit path, acquisition time, obtain manner, security and file behavioral trait.
In order to make administration interface succinct, for security and the file behavioral trait of file, emphasize to show the information of indicating of the file with file behavior and the information of indicating of unsafe file on administration interface; In fact, also reflecting that safe file reaches the file that does not have the file behavior simultaneously on administration interface.
In order to allow the user recognize more easily the fileinfo of the file that all have obtained, on the basis of above scheme, this method is with the demonstration of classifying of above-mentioned fileinfo, specifically, step 3 specifically comprises: fileinfo that will the file that all have obtained in monitoring is sorted out by the default criterion of sorting out take file as unit; Corresponding to each classification, provide in administration interface and sort out one to one tab, select any one to sort out tab, show corresponding to the fileinfo in the classification of selecteed classification tab in administration interface.Described default classification criterion for by file type, by the obtain manner of file, a kind of by depositing in the path of file.
Show corresponding title and/or icon on each classification tab, also show simultaneously the quantity of corresponding classification File.
In order to allow the user understand about obtaining recently the fileinfo of (acquisition time by file is determined) file, on the basis of above scheme, the fileinfo of the file that this method will be obtained is recently concluded demonstration, specifically, step 3 specifically also comprises: provide one to obtain recently tab at administration interface, select to obtain recently tab, show the fileinfo of the file that obtains recently in administration interface; File in some scopes of arranging in the certain hour scope that the file that obtains is recently divided by acquisition time for all have obtained in monitoring file or by acquisition time.
Obtain on tab recently the quantity that shows " obtaining recently " and obtain recently the filename in fileinfo.
As shown in Figure 2, this embodiment provides and realizes that a kind of of said method obtains to the user system that file manages, and comprising:
Supervising device is used for the behavior that the monitoring controlled plant obtains file;
Analytical equipment is used for the file that monitoring has been obtained is analyzed, and obtains fileinfo, and described analysis comprises attribute scanning, and described attribute scanning comprises the filename that obtains file;
Display device is used for fileinfo is shown on an administration interface.
For more convenient user use and information more comprehensively, the design people has done following improvement to said system:
Described attribute scanning in above-mentioned analytical equipment also comprise obtain file type, file size, deposit the path, acquisition time, described acquisition time is creation-time or the modification time of file.For the file that has just obtained, its creation-time is all the same with modification time.
Described analysis in analytical equipment described above also comprises:
The file that has obtained described in monitoring is carried out the file behavioural analysis;
The file that has obtained described in monitoring is carried out safety analysis;
The obtain manner of the file that has obtained described in determining to monitor.
Therefore, can recognize following fileinfo by administration interface: the file that has been obtained and title thereof, size, deposit path, acquisition time, security and file behavioral trait.
In order to make administration interface succinct, for security and the file behavioral trait of file, emphasize to show the information of indicating of the file with file behavior and the information of indicating of unsafe file on administration interface; In fact, also reflecting that safe file reaches the file that does not have the file behavior simultaneously on administration interface.
In order to allow the user recognize more easily the fileinfo of the file that all have obtained, on the basis of above scheme, native system is with the demonstration of classifying of above-mentioned fileinfo, specifically, described display device, specifically comprise for will be in monitoring the fileinfo of all files that obtained sort out by the default criterion of sorting out take file as unit; Corresponding to each classification, provide in administration interface and sort out one to one tab, select any one to sort out tab, show corresponding to the fileinfo in the classification of selecteed classification tab in administration interface.Described default classification criterion for by file type, by the obtain manner of file, a kind of by depositing in the path of file.
Show corresponding title and/or icon on each classification tab, also show simultaneously the quantity of corresponding classification File.
In order to allow the user understand about obtaining recently the fileinfo of (acquisition time by file is determined) file, on the basis of above scheme, the fileinfo of the file that native system will obtain is recently concluded demonstration, specifically, described display device, specifically also comprise for providing one to obtain recently tab at described administration interface, select to obtain recently tab, show the fileinfo of the file that obtains recently in administration interface; File in some scopes of arranging in the certain hour scope that the described file that obtains is recently divided by acquisition time for all have obtained in monitoring file or by acquisition time.
The below is application of the present invention for instance:
monitor certain PC computer the behavior of obtaining file is arranged, specifically: a sudden peal of thunder 7 download file tante.exe and file bakdeg.exe, file tante.exe and file bakdeg.exe all be kept at D: application file, Kingsoft browser downloads file wbt.exe and file kdt.exe, file wbt.exe and file kdt.exe all be kept at D: working document, above-mentioned four each leisures of file have been acquired rear all being carried out and have comprised attribute scanning, safety analysis, the file behavioural analysis, the analysis of obtain manner, obtain the fileinfo of above-mentioned four files, in example, the fileinfo of above-mentioned four files take file as unit by an obtain manner (sudden peal of thunder 7, Kingsoft browser) sort out and show on administration interface with the tab pattern, simultaneously, administration interface also provides with the tab pattern the fileinfo that obtains recently file and shows, specifically: administration interface comprises that sorting out tab and one for two obtains tab recently, first is sorted out tab and shows " sudden peal of thunder 7 (2) ", sort out tab for second and show " Kingsoft browser (2) ", obtain recently tab and show " downloading recently (4) ", select nearest the download option card, the demonstration of administration interface such as Fig. 3, select first to sort out tab, the demonstration of administration interface such as Fig. 4, select second to sort out tab, the demonstration of administration interface such as Fig. 5.
The present invention is not limited to above-described embodiment, and for example, in above-mentioned giving an example, the fileinfo of above-mentioned four files is categorized on administration interface by the preservation approach take file as unit and shows; Therefore, based on above-described embodiment, simple replacement that do not make creative work, should belong to the scope that the present invention discloses.